Autonomous System Provider Authorization

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/0/AS215110.asa
File:                     AS215110.asa (raw, json)
Hash identifier:          rhDyPL63QHcwvcNPqjsrLcYotF+HyPOn79QUxIVU5F8=
Subject key identifier:   0E:FF:EE:3A:7B:06:94:B3:43:CB:2B:D7:50:BD:B3:4A:25:00:F6:91
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       3DC36F64E7E4A35D96B22D9AFC69AEB4B24CB7BF
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/AS215110.asa
Signing time:             Sun 26 Apr 2026 17:07:01 +0000
ASPA not before:          Sun 26 Apr 2026 17:02:01 +0000
ASPA not after:           Sun 25 Apr 2027 17:07:01 +0000
Customer ASID:            215110
Providers:                AS: 11967
                          AS: 34927
                          AS: 201541
                          AS: 202358
                          AS: 205941
                          AS: 207252
                          AS: 209533
                          AS: 212895
                          AS: 213449
                          AS: 214915
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c3:6f:64:e7:e4:a3:5d:96:b2:2d:9a:fc:69:ae:b4:b2:4c:b7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: Apr 26 17:02:01 2026 GMT
            Not After : Apr 25 17:07:01 2027 GMT
        Subject: CN=0EFFEE3A7B0694B343CB2BD750BDB34A2500F691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:b8:6d:34:59:b7:ab:03:11:7b:db:49:94:
                    c9:05:2b:ce:d7:00:42:67:90:30:8a:b7:eb:b2:0e:
                    55:dd:3d:54:93:bc:fa:a1:fb:99:9f:af:39:f1:77:
                    6a:56:04:f6:52:fa:fe:4b:72:61:0a:11:10:62:14:
                    6d:ad:17:28:cf:15:17:29:86:52:8b:32:f6:05:6a:
                    05:d6:28:b9:f8:21:c0:bb:18:43:e2:7c:a5:88:d1:
                    1a:3a:e7:7f:b8:b8:b7:79:f8:8d:07:67:4b:ce:59:
                    2b:b7:84:c9:cb:e2:6a:86:03:47:b9:e4:bb:8d:b2:
                    b6:28:b8:d5:02:fb:94:cc:fc:24:5c:e1:3a:10:08:
                    66:64:e6:d3:a0:ee:51:21:93:57:fe:8c:b5:4f:13:
                    75:81:ea:ea:90:e0:b8:30:d4:ad:2f:5d:dd:39:7f:
                    2c:4f:9a:37:9c:a5:21:ef:d4:24:f6:6b:a1:68:98:
                    4b:6d:e4:73:c0:f8:ce:02:db:37:b0:6b:39:a6:d3:
                    0b:8e:1b:6c:a4:26:68:6e:91:7c:6f:3e:2e:29:0c:
                    a8:09:5e:1b:7c:e5:ae:53:a1:ce:7d:48:5e:49:06:
                    1f:72:67:ae:07:e7:67:fa:22:a1:fa:7b:ef:d9:3a:
                    36:64:f6:32:b9:82:6d:31:c1:b9:e7:77:3c:ac:92:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FF:EE:3A:7B:06:94:B3:43:CB:2B:D7:50:BD:B3:4A:25:00:F6:91
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/AS215110.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215110

    Signature Algorithm: sha256WithRSAEncryption
         4c:f9:95:ef:06:22:96:26:af:0e:1f:07:7f:77:37:a9:45:01:
         2b:93:45:65:a6:47:2a:98:70:8e:70:3c:7b:dc:7f:8d:fe:33:
         48:bc:4b:82:c7:2d:0a:49:ee:b3:7f:c4:3a:3e:d5:f1:5f:ce:
         4d:39:2c:e5:20:49:3a:5e:5e:52:e1:47:69:76:d6:0d:61:3c:
         db:b1:f2:5d:8b:b1:04:b5:59:3c:db:48:0f:49:cd:a9:58:13:
         aa:72:6c:94:b7:85:ba:06:c8:82:50:1d:44:61:bb:42:6d:f9:
         bf:2a:90:9b:ed:10:6e:98:2d:af:cc:d0:70:2e:a7:8f:d3:fd:
         7d:59:2f:de:db:c5:8f:c6:f6:80:ae:78:76:ff:10:73:1e:74:
         ed:ab:59:c7:a1:aa:37:a1:5a:0a:93:c4:e2:ef:25:7f:96:1d:
         94:6f:45:67:ae:45:ac:b1:df:c1:c2:92:56:98:b4:49:31:e6:
         a2:86:1e:54:a2:2f:9d:c8:ea:a1:64:9b:ab:42:b3:67:7c:3a:
         bc:ee:1f:45:1f:07:b4:c9:64:6e:e4:9d:97:1c:28:ab:91:95:
         44:c1:23:35:c4:99:9d:3c:9c:f4:dd:f9:56:93:27:6a:2f:d0:
         17:63:44:05:c6:a1:52:9b:40:2e:a8:3e:89:ba:c5:b4:94:64:
         ed:49:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:35 2026 by rpki-client